---
date: 2024-10-17T10:48:02+00:00
modified: 2024-10-17T10:48:02+00:00
permalink: https://kaspars.net/note/mastodon-social-113323074038004775
post_type: note
author:
  name: Kaspars
  avatar: https://reverse.kaspars.net/gravatar/avatar/92bfcd3a8c3a21a033a6484d32c25a40b113ec6891f674336081513d5c98ef76?s=96&d=mm&r=g
---

# On October 17, 2024 at 13:48

Today I learned that the GitHub Checkout actions sets the http.\[..\].extraheader config flag which silently applies to all git commands and prevents the use of any other tokens. Even with all my effort to isolate the CI tasks from the runner environment, this one config leaked through…